Software Engineer

at  VTG

Overview:
VTG is seeking a Software Engineer to assist our customer in San Diego, CA. This hybrid position is 80% on-site in San Diego, California, and 20% remote.

Responsibilities:

• Support application deployment through a Navy DevSecOps pipeline, to include application containerization, build automation, software scanning for cyber burn-down and identity access management system integration;
• Support implementation of new features and patch security vulnerabilities identified in applications;
• Advise on or conduct STIGs and cybersecurity compliance reviews of containerized applications and hardening containers;
• Troubleshoot, elevate, and communicate application blockers and issues associated with application containerization, pipeline automation, software scanning, and cybersecurity; Integrate applications with common identity access management systems or service mesh solutions;
• Write technical documentation and white papers for lessons learned, solutions, and processes to ensure knowledge sharing and information discovery and recommend improvements or solutions to existing processes and systems;
• Work with management and the government daily to address pain points of customers, develop solutions, and write reports to improve DevSecOps processes and identified bottlenecks;
• Submit, track, and follow up with customers utilizing multiple helpdesk and ticketing systems to ensure that blockers have been mitigated in the environment;
• Assist customers with systems integration testing, blockers, and reporting.

Qualifications:

REQUIRED SKILLS:

• BA or BS degree and 8+ years’ experience in Computer Science, Computer Engineering, SoftwareDevelopment, Software Engineering, Information Technology, or Information Science;
• Must be US Citizen and have an active DoD Secret Clearance who is eligible for TS/SCI and ability to sustain one;
• Must have or be able to obtain a CompTIA Security + certificate within 60 days of hire;
• Must have a Linux experience (Linux certification or CompTIA Linux + Preferred);
• Must have knowledge of various software languages and familiarity with command line interfaces;
• Must have knowledge of automated build pipelines using Openshift/Tekton;
• Must have familiarity with container management software such as Docker, Podman, Jfrog Artifactory, Openshift or Kubernetes and application security posture management tools;
• Must have familiarity with vulnerability patching with cybersecurity SAST and DAST scanning tools;
• Must have ability to leverage experience and judgment to plan and accomplish goals;
• Must have excellent organizational skills with an ability to communicate effectively orally and in writing;
• Must be able to write and maintain customer facing documentation and reports;
• Proficiency in writing and understanding YAML configurations

PREFERRED SKILLS:

• Experience with DoD DevSecOps pipelines such as Platform One, Kessel Run, or Black Pearl;
• Experience with SAST and DAST tools Coverity, Checkmarx, OWASP Zap, SonarQube, Jfrog Xray, and CodeDX;
• Experience with Openshift Containerization Platform 4.12;
• Experience with Openshift and container configuration, resourcing, and storage;
• Experience with software testing and systems integration testing;
• Experience with wiki documentation; Atlassian Products preferred;
• Experience with ticketing systems and working closely with tier 2 and 3 helpdesk.

• Support application deployment through a Navy DevSecOps pipeline, to include application containerization, build automation, software scanning for cyber burn-down and identity access management system integration;
• Support implementation of new features and patch security vulnerabilities identified in applications;
• Advise on or conduct STIGs and cybersecurity compliance reviews of containerized applications and hardening containers;
• Troubleshoot, elevate, and communicate application blockers and issues associated with application containerization, pipeline automation, software scanning, and cybersecurity; Integrate applications with common identity access management systems or service mesh solutions;
• Write technical documentation and white papers for lessons learned, solutions, and processes to ensure knowledge sharing and information discovery and recommend improvements or solutions to existing processes and systems;
• Work with management and the government daily to address pain points of customers, develop solutions, and write reports to improve DevSecOps processes and identified bottlenecks;
• Submit, track, and follow up with customers utilizing multiple helpdesk and ticketing systems to ensure that blockers have been mitigated in the environment;
• Assist customers with systems integration testing, blockers, and reporting